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Abstract. Let G = (V, E) be an n-nodes non-negatively real-weighted 
undirected graph. In this paper we show how to enrich a single-source 
shortest-path tree (SPT) of G with a sparse set of auxiliary edges selected 
from E, in order to create a structure which tolerates effectively a path 
failure in the SPT. This consists of a simultaneous fault of a set E of at 
most / adjacent edges along a shortest path emanating from the source, 
and it is recognized as one of the most frequent disruption in an SPT. 
We show that, for any integer parameter k > 1, it is possible to provide a 
very sparse (i.e., of size 0{kn - auxiliary structure that carefully 

approximates (i.e., within a stretch factor of {2k — 1)(2|T’| -|- 1)) the 
true shortest paths from the source during the lifetime of the failure. 
Moreover, we show that our construction can be further refined to get 
a stretch factor of 3 and a size of O(nlogn) for the special case / = 2, 
and that it can be converted into a very efficient approximate-distance 
sensitivity oracle, that allows to quickly (even in optimal time, if fc = 
1) reconstruct the shortest paths (w.r.t. our structure) from the source 
after a path failure, thus permitting to perform promptly the needed 
rerouting operations. Our structure compares favorably with previous 
known solutions, as we discuss in the paper, and moreover it is also very 
effective in practice, as we assess through a large set of experiments. 


1 Introduction 

Broadcasting data from a source node to every other node of a network is one 
of the most basic communication primitives in modern networked applications. 
Given the widespread diffusion of such applications, in the recent past, there has 
been an increasing demand for more and more efficient, i.e. scalable and reliable, 
methods to implement this fundamental feature. 

* Research partially supported by the Italian Ministry of University and Research un¬ 
der the Research Grants: 2010N5K7EB PRIN 2010 “ARS TechnoMedia” (Algorit- 
mica per le Reti Sociali Tecno-mediate), and 2012C4E3KT PRIN 2012 “AMANDA” 
(Algorithmics for MAssive and Networked DAta). 



The natural solution is that of modeling the network as a graph (nodes as 
vertices and links as edges) and building a (fast and compact) structure to be 
used to transmit the data. In particular, the most common approach of this kind 
is that of computing a shortest-path tree (SPT), rooted at the desired source 
node, of such graph. 

However, the SPT, as any tree-based topology, is prone to unpredictable 
events that might occur in practice, such as failures of nodes and/or links. There¬ 
fore, the use of SPTs might result in a high sensitivity to malfunctioning, which 
unavoidably causes the undesired effect of disconnecting sets of nodes from the 
source and thus the interruption of the broadcasting service. 

Therefore, a general approach to cope with this scenario is to make the SPT 
fault-tolerant against a given number of simultaneous component failures, by 
adding to it a set of suitably selected edges from the underlying graph, so that 
the resulting structure will remain connected w.r.t. the source. In other words, 
the selected edges can be used to build up alternative paths from the root, each 
one of them in replacement of a corresponding original shortest path which was 
affected by the failure. However, if these paths are constrained to be shortest, 
then it can be easily seen that for a non-negatively real weighted and undirected 
graph of n nodes and m edges, this may require as much as 0{m) additional 
edges, also in the case in which m = 0(n^). In other words, the set-up costs of 
the strengthened network may become unaffordable. 

Thus, a reasonable compromise is that of building sparse and fault-tolerant 
structure which approximates the shortest paths from the source, i.e., that con¬ 
tains paths which are guaranteed to be longer than the corresponding shortest 
paths by at most a given stretch factor, for any possible edge/vertex failure that 
has to be handled. In this way, the obtained structure can be revised as a 2-level 
communication network: a first primary level, i.e., the SPT, which is used when 
all the components are operational, and an auxiliary level which comes into play 
as soon as a component undergoes a failure. 

In this paper, we show that an efficient structure of this sort exists for a 
prominent class of failures in an SPT, namely those involving a set of adjacent 
edges along a shortest path emanating from the source of the SPT. Our study 
is motivated by several applications, such as, for instance, traffic engineering 
in optical networks or path-congestion management in road-networks, where 
failures in the above form often affect the SPT mm- For this kind of failure. 



also known 


possible not only to obtain 


resilient sparse structures, but also that these can be pre-computed efficiently, 
and that they can return quickly the auxiliary network level. 

1.1 Related Work 

In the recent past, many efforts have been dedicated to devising single and 
multiple edge/vertex fault-tolerant structures. More formally, let r denote a dis¬ 
tinguished source vertex of a non-negatively real-weighted and undirected graph 

^ Notice that this is a small abuse of nomenclature, since failures we consider are 
restricted to the path’s edges only. 
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G = {V{G),E{G)), with n nodes and m edges. We say that a spanning sub¬ 
graph H of G is an Edge/Vertex-fault-tolerant a-Approximate SPT (in short, 
Of-E/VASPT), with a > 1, if it satisfies the following condition: For each edge 
e G E{G) (resp., vertex v G V{G)), all the distances from r in the subgraph 
H — e, i.e., H deprived of edge e (resp., the subgraph H — v, i.e., H deprived of 
vertex v and all its incident edges) are a-stretched (i.e., at most a times longer) 
w.r.t. the corresponding distances in G — e (resp., G — v). 

An early work on the matter is , where the authors showed that by adding 
at most n — 1 edges to the SPT, a 3-EASPT can be obtained. This was shown to 
be very useful in order to compute a recovery scheme needing only one backup 
routing table at each nodeJIH]. In [IS] , the authors showed instead how to build 
a 1-EASPT in 0{mn) tim^ Notice that, a 1-EASPT contains exact replacement 
paths from the source, but of course its size might be 0{n^) if G is dense. Then, 
in |2|, Baswana and Khanna devised a 3-VASPT of size O(nlogn). Later on, a 
significant improvement to this result was provided in |S], where the authors 
showed the existence of a (1 -P e)-E/VASPT, for any £ > 0, of size 0( "^°2^”' ). 

Concerning unweighted graphs, in |2] the authors give a (l-|-£)-VABFS (where 
BFS stands for breadth-first search tree) of size 0(^-1- nlogn) (actually, such a 
size can be easily reduced to 0(fj)). Then, Parter and Peleg in [^ present a 
set of lower and upper bounds to the size of a (a, ,5)-EABFS, namely a structure 
for which the length of a path is stretched by at most a factor of a, plus an 
additive term of fi. More precisely, they construct a (1,4)-EABFS of size 0{rA^^). 
Moreover, assuming at most / = 0(1) edge failures can take place, they show 
the existence of a (3(/-|- !),(/-!- 1) logn)-EABFS of size 0(fn). This was improv¬ 
ing onto the general fault-tolerant spanner construction given in [Hj, which, for 
weighted graphs and for any integer parameter k > 1, is resilient to up to / edge 
failures with stretch factor of 2A: — 1 and size 0(/ • 

On the other hand, concerning approximate-distance sensitivity oracles (sim¬ 
ply a-oracles in the following, where a denotes the guaranteed approximation 
ratio w.r.t. true distances), researchers aimed at computing, with a low prepro¬ 
cessing time, a compact data structure able to quickly answer to some distance 
query following an edge/vertex failure. The vast literature dates back to the work 
[23] of Thorup and Zwick, who showed that, for any integer fc > 1, any undi¬ 
rected graph with non-negative edge weights can be preprocessed in 0{km-n^/^) 
time to build a {2k — l)-oracle of size 0{k ■ answering in 0{k) time to 

a post-failure distance query, recently reduced to 0(1) time in [5]. Due to the 
long-standing girth conjecture of Erdos ca, this is essentially optimal. Con¬ 
cerning the failure of a set F of at most / edges, in uni the authors built, 
for any integer fc > 1, a (8fc — 2)(/ -P l)-oracle of size 0(/fc • log(nVF)), 

where W is the ratio of the maximum to the minimum edge weight in G, and 
with a query time of 0(1^1 • log log d), where d is the actual distance between 
the queried pair of nodes in G — F. As far as SPT oracles (i.e., returning dis¬ 
tances/paths only from a source node) are concerned, in [5] it is shown how to 
build in 0(mlog n-Pnlog^ n) time an SPT oracle of size 0(n log n), that for any 

The O notation hides poly-logarithmic factors in n. 
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single-vertex-failure returns a 3-stretched replacement path in time proportional 
to the path’s size. Finally, for directed graphs with integer positive edge weights 
bounded by M, in m the authors show how to build in 0(Mn‘^) time and 0{n^) 
space a randomized single-edge-failure SPT oracle returning exact distances in 
0(1) time, where w < 2.373 denotes the matrix multiplication exponent. 


1.2 Our Results 

In this paper, we consider the specific, yet interesting, problem of making a SPT 
resilient to the failure of any sub-path of size (i.e., number of edges) at most 
/ > 1 emanating from its source. 

More in details, let F’ be a set of cascading edges of a given SPT, where 
0 < < /• We say that a spanning subgraph iJ of G is a Path-Fault-Tolerant a- 

Approximate SPT (in short, a-PASPT), with a > 1, if, for each vertex z G V{G), 
the following inequality holds: dn-piz) < a • da-F{z), where dc-piz) (resp., 
dH-p{z)) denotes the distance from r to z in G — F (resp., H — F). For any 
integer parameter k > 1, we can provide the following results: 


— We give an algorithm for computing, in 0{n-{m-\-f^)) time, a {2k — l){2\F\-\- 
1)-PASPT containing 0{kn ■ Z^"*"*) edges; 

— We give an algorithm for computing, in 0(n • (to -P /^)) time, an oracle of 

size 0{kn- which is able to return: (i) a (2fc —1)(2|F|-P l)-approximate 

distance in G — F between r and a generic vertex z in 0{k) time; (ii) the 
associated path in 0{k -\- f -\- €} time, where I is the number of its edges; if 
k = 1, this can be further reduced to 0{£) time. 

Concerning the former result, it compares favorably with both the afore¬ 
mentioned general fault-tolerant spanner constructions given in [3], and the un¬ 
weighted EABFS provided in m, while concerning instead the latter result, it 
compares favorably with the fault-tolerant oracle given in m- For the sake of 
fairness, we remind that all these structures were thought to cope with edge 
failures arbitrarily spread across G, though. 

Besides that, we also analyze in detail the special case when at most / = 2 
failures of cascading edges can occur, for which we are able to achieve a sig¬ 
nificantly better stretch factor. More precisely, we design: (i) an algorithm for 
computing, in 0(n • (m-Pnlogn)) time, a 3-PASPT containing O(nlogn) edges; 
(ii) an algorithm for computing, in 0{n ■ (to -P nlogn)) time, an oracle of size 
O(nlogn) which is able to return a 3-approximate distance in G — F between r 
and a generic vertex z in constant time, and the associated path in a time pro¬ 
portional to the number of its edges. Some of the proofs related to these latter 
results will be given in the appendix. 

Finally, we provide an experimental evaluation of the proposed structures, to 
assess their performance in practice w.r.t. both size and quality of the stretch. 
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2 Notation 


In what follows, we give our notation for the considered problem. We are given a 
non-negatively real-weighted, undirected graph G = {V{G),E{G)) with |I^(G)| = 
n vertices and \E{G)\ = m edges. We denote by waie) or wg{u,v) the weight 
of the edge e = {u,v) G E{G). Given an edge e = {u,v), we denote by G — e 
or G — (u, v) the graph obtained from G by removing the edge e. Similarly, for 
a set F of edges, G — F denotes the graph obtained from G by removing the 
edges in F. Furthermore, given a vertex v € V (G), we denote by G — n the graph 
obtained from G by removing vertex v and all its incident edges. Given a graph 
G, we call TrG{x,y) a shortest path between two vertices x,y £ V(G), dcix^y) 
its weighted length (i.e., the distance from x to y in G), Tdr) a shortest path 
tree (SPT) of G rooted at a certain distinguished source vertex r. Moreover, we 
denote by TG(r, x) the subtree of rooted at vertex x. Whenever the graph 

G and/or the source vertex r are clear from the context, we might omit them, 
i.e., we write 7r(it) and d(u) instead of TTG{r,u) and dair^u), respectively. When 
considering an edge {x,y) of an SPT, we assume x and y to be the closest and 
the furthest endpoints from r, respectively. Furthermore, if P is a path from x 
to y and Q is a path from y to z, with x,y,z G V{G), we denote by P o Q the 
path from a: to z obtained by concatenating P and Q. We also denote by w{P) 
the total weight of the edges in P. 

For the sake of simplicity we consider only edge weights that are strictly posi¬ 
tive. However, our entire analysis also extends to non-negative weights. Through¬ 
out the rest of the paper, we assume that, when multiple shortest paths exist, 
ties are broken in a consistent manner. In particular we fix an SPT T — Tg{t) 
of G and, given a graph FI C G and x,y G V{H), whenever we compute the 
path TrH{x,y) and ties arise, we prefer edges in E(T). 

A path between any two vertices u,v G V{G) is said to be an a-approximate 
shortest path if its length is at most a times the length of the shortest path 
between u and u in G. For the sake of simplicity, we assume that, if a set of 
at most / edge failures has to be handled, the original graph is (/ -I- l)-edge 
connected. Indeed, if this is not the case, we can guarantee the (/ -I- l)-edge 
connectivity by adding at most 0{nf) edges of weight -|-oo to G. Notice that 
this is not actually needed by any of the proposed algorithms. 

3 Our PASPT Structure and the Corresponding Oracle 

In what follows, we give a high-level description of our algorithm for computing 
a (2|F| -I- 1)-PASPT, namely H (see Algorithm [^, where |F| < /. We define 
the level £{v) of a vertex v G V (G) to be the hop-distance between r and v in 
T = Tcir), i.e., the number of edges of the unique path from r to u in T. Note 
that, when a failure of |F| consecutive edges occurs on a shortest path, T will be 
broken into a forest C of |F| -P 1 subtrees. We consider these subtrees as rooted 
according to T, i.e., each tree Ti is rooted at vertex ri that minimizes i{ri). 

Roughly speaking, the algorithm considers all possible path failures F* of / 
vertices by fixing the deepest endpoint v of the failing path. It then reconnects 


5 


Algorithm 1: Algorithm for building a (2|F| + 1)-PASPT. Notice that an 
optional integer parameter fc > 1 is used. By default we set k = 1. 

Input : A graph G, r £ V{G), an SPT T = Tair), an integer / 

Output: A (2|F| + 1)-PASPT of G rooted at r 


1 H^T = TG{r) 

2 foreach v £ V{G) do 

3 I Let (r = zo, zi,..., Zi{v)) be the path from r to w in T 

// F* contains last min{/, ^(t)} edges of the path 

4 Let F* = {{zi-i, Zi) : i > £{v) — mm{£{v), f}} 

5 Let C* = {Ti , Tl) ■ • ■ } be the set of connected components ot T — F* 
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// Build an auxiliary graph U associated with v 
U ■£- ({r* : r* is the root of T*}, 0) 
foreach T* ,T* £ C* : T* T* do 

Let Eij = {(u,a) e E{G) \ F* ■. u £ V(T*),v £ V(T*)} 

{x',y') £- argmin {dT{r*,x) + WG[x,y) + dT[y,r*)} 

(x,y)eEij 

//We say that {x',y') £ E{G) is associated to (r*,r*) G E(U) 
EiU)^ E{U)U{{r*,r*)} 

wu{r*,r*) = dT{r*,x') + wg{x' ,y') + dxix' ,r*) 


II Optional step, executed only if Ayf1. Otherwise, let U' = U. 

12 I U' £- Compute a (2k — l)-spanner of U 

13 I E(H) £- E(H) U E(U') 

14 return FI 


the resulting / + 1 subtrees of G — A"* by selecting at most 0(p) edges into a 
graph U, one for each couple of trees T*,T* of the forest G — F. These edges are 
either directly added to the structure H or they are first sparsified into a graph 
U' by using a suitable multiplicative {2k — l)-spanner, so that only kf^~^k of 
them are added to H. 

In particular, it is known that, given an n-vertex graph and an integer fc > 1, 
both a {2k — l)-spanner and a {2k — 1)-approximate distance oracle of size 
0{kn^^k) can be built in 0{n'^) time. The oracle can report an approximate 
distance between two vertices in 0{k) time, and the corresponding approximate 
shortest path in time proportional to the number of its edges. For further details 
we refer the reader to mm- Recently, it has been shown in [5] that a random¬ 
ized (2A: —l)-approximate distance oracle of expected size can be built, 

so that answering a distance query requires only constant time. In what follows, 
however, we only describe results which are based on deterministic construction 
and provide a worst case guarantee on the size of the resulting structures. 

We start by bounding the running time of Algorithm 

Lemma 1. Algorithm^ requires 0{n{Tn + p)) time. 

Proof. Notice that the loop in line [^considers each vertex of G at most once. We 
bound the time required by each iteration. For each vertex v a complete auxiliary 
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graph U of 0{f) vertices is built. Moreover, the weights of all the edges of U 
can be computed in 0{m) time by scanning all the edges of E{G) \ F* while 
keeping track, for each pair of vertices G V{U), of the minimum value 

of the formula in line|^ Finally, the optional spanner construction invoked by 


line 12 requires 0{p) time. This concludes the proof. 


□ 


We now bound the size of the returned structure: 

Lemma 2. The structure H returned by Algorithm^ contains 0{kn ■ 
edges. 


Proof. At the beginning of the algorithm, H coincides with T = Ta{r), so 
\E{H)\ = 0{n). Therefore, we only need to bound the number of edges added to 
H during the execution of the algorithm. Notice that, for each vertex v G V{G), 
Algorithm [T] considers at most / + 1 connected components of C*. For each pair 
of components, at most one edge is added to C/, hence \E{U)\ = 0{p). Either 
k = 1 and [/' = [/ or fc > 1 and U' is a {2k — l)-spanner of U. In both cases we 
have \U'\ = 0{k\U\^~^i) = 0{kf^'^i). As only the edges of IP gets added to H, 
the claim follows. □ 


We now upper-bound the distortion provided by the structure E[. For the 
sake of clarity, we first discuss the case where the step of line of Algorithmic 
is omitted, i.e., we simply set k = 1 and U' = U. At the end of this section we 
will argue about the general case. 

For each path failure F of \F\ < f edges, and for each target vertex t, we will 
consider a suitable path P in G — F, whose length is at most (2|F| -|- 1) times 
the distance dc-F{t)- Then, since P might not be entirely contained in H — F, 
we will show that its length must be an upper bound to the length a path Q in 
p[ — F between r an t, and hence to du-pit). 

We first discuss how P is defined: consider the forest C of the connected 
components oi T — F. Let tt = nG-pii"), let tq = r, and let to be the last 
vertex of tt belonging to Tq. W.l.o.g., we assume t ^ V{To), as otherwise we have 
dn-pit) = dG-p{t). Moreover, we call (tg, Si) the edge following vertex tg in tt. 

Initially, we set Pq = ttt{s, to) o {to, Si ) and i = I. We proceed iteratively: Let 
Ti be the subtree of G which contains Si and let U be the last vertex of tt such 
that ti belongs to Ti, i.e., ti is in the same subtree as Si (notice that, it may be 
that Si = ti). Call the root of Ti. llti = t we set P = Pi-iOTTT{si, ri)oTTT{ri, ti), 
and we are done. Otherwise, let {ti,Si+i) be the edge following ti in tt. We set 
Pi = Pi-iOTTT{si,ri)oTTT{ri, ti) o {ti, Si+i), we increment i by one, and we repeat 
the whole procedure. Figure [C shows an example of such a path P. Let h be the 
final value of i, at the end of this procedure, so that t = th GV{Th). Notice that, 
by construction, the path P does not contain any failed edge. We now argue that 
the length w{P) of P, is always at most (2|F| -|- I) times the distance dG-p{t). 

Lemma 3. dp{t) < (2|E| -|- 1) • dG-p{t), for every t G V{G). 

Proof. We proceed by showing, by induction on i, that dp{ti) < {2i + I) • 
dG-p{ti). The claim follows since t = th and h < |E|. 
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r = tq 



Fig. 1. Example of construction of P. The path P is shown in bold, while the 
path TT is composed of both the light subpaths and of the bold edges with end¬ 
point in different subtrees. In this example P traverses 4 subtrees and hence 
h = S. 


The base case is trivially true, as we have dp{to) = 1 • dc-pito), since Iq 
belongs to the same subtree Tq as r. Now, suppose that the claim is true for 
i — 1. We can prove that it is true also for i by writing: 

dp{ti) = -I- dp(ti_i. Si) -I- dp{si, Ti) + dp{n, U) 

< {2i - 1) • dc-piti-i) -f dG-F{ti-i,s,) + dcisi, Ti) + daivi, U) 

< {2i — 1) • dG-piU-i) + dG-F{ti-i,Si) + dG{si, U) -I- 2dG{ri, U) 

< {2i — 1) • dG-F{ti) + 2dG{ti)) < {2i + 1) • dG-piU)- 


□ 

It remains to show that, even though P might not be entirely contained in 
H — F, its length w{P) is always an upper bound to dH-F{t)- 

Let V be the deepest endpoint (w.r.t. level) among the endpoints of the edges 
in F. Moreover, let F* be the set of failed edges considered by Algorithm 
when V is examined at line and let U be the the corresponding auxiliary 
graph. Notice that F C F* as F* always contains min{£(p),/} edges. As a 
consequence, Tq £ C contains, in general, several trees in C*. We let R be the 
set of the roots of all the subtrees of Tq which are in Cq . Notice that every other 
tree Tj € C such that Tj ^ Tq belongs to C* (see Figure]^. 

Remember that r/j is the root of the subtree T/^ G C* = T—F* which contains 
t. Let Tq be the root of the last tree Tq G C* which is contained in Tq and is 
traversed by irG-pi'i'h)- It follows that Tq G V{P). We now construct another 
path Q, which will be entirely contained in H — F. We choose a special vertex 
Tq G R, as follows: 

Tq = argminidriz) + du{z,rh)}. ( 1 ) 

z£R 

The path Q is composed of three parts, i.e. Q = Qio Q 20 Qq. The first one, 
Qi, coincides with TTpirQ). The second one is obtained by considering the shortest 
path 7r[/(rQ,r/,) and by replacing each edge going from a vertex r* G V{U) to a 
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5 = 7-0 


U 



Fig. 2. An example of path Q contained in H — F (left) and of the corresponding 
edges of U (right). The length of Q is upper-bounded by that of P. 


vertex r* G V{U) with the path: TrT{r*,x') o {x',y') o TrT{x',r*), where {x',y') 
is the edge associated to {r*,r*) by Algorithm flj when v is considered. Finally, 
Qs = In Figure]^ we show an exam^e of how such path Q can be 

obtained. We now prove that: 

Lemma 4. < 'w{Q) < w{P) 


Proof. Notice that the path Q is in iJ and does not contain any failed edge, 
hence dH-F{r,t) < w{Q) is trivially true. 

To prove w{Q) < w{P), notice that P can also be decomposed into the three 
subpaths Pi = P[r,T q], P2 = P[rQ,r;,] and P3 = P[rh,i\. We have that that 
P 3 = Qs and that the endpoints of P 2 coincide with the endpoints of Q 2 . By the 
choice of rg, we must have w{Qi) + w{Q2) < w(Pi) + w{P2) as the (weighted 
length of) path Pi o P 2 is considered in equation (Q when z = Tq. This implies 
that w{Q) = w{Qi) + w{Q 2) + w{Q3) < w{Pi) + w{P2) + w{P^) = w{P). □ 


By combining Lemma with Lemma and it immediately follows: 

Theorem 1. AlqorithmXn computes, mO(n(m+ f^)) time, a (2\F\ + 1)-PASPT 
of size 0{np), for any |F| < /. 


We now relax the assumption that U = U'. Indeed, if k ^ 1, Algorithm 
computes, in line 12 a {2k — l)-spanner U' of the graph U. In this case, we can 
construct a path Q' in a similar way as we did for Q, with the exception that 
we now use the graph U’ instead of U. Once we do so, it is easy to prove that a 
more general version of Lemma holds: 


Lemma 5. dn-Fir, t) < {2k — l)w{Q') < {2k — l)w{P) 

Lemma 1^ combined with Lemmaimmediately implies that dH-F{i',t) < 
{2k — 1)(2|F| -I- l)dG-F{r,t). This discussion allows us to show an interesting 
trade-off between the size of the returned structure and the multiplicative stretch 
provided, as summarized by the following theorem: 


Theorem 2. Let k > 1 he an integer. Then, Algorithm [7] can compute, in 
0{n{m + p)) time, a {2k — 1){2\F\ + 1)-PASPT of size 0{nk-f^~^^). 
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Algorithm 2: Algorithm for building an oracle with constant query time. 

1 Preprocess T = Toir) to answer LCA queries as shown in |16| 

2 For each vertex v € V{G), compute and store its level £{v). 


3 foreach v G V (G) do 

4 I Let (r = zo, Zi, ..., zi{v) be the path from r to n in T 

5 Build graph U associated with vertex v as in Algorithm 

6 Compute and store the solution to the all-pairs shortest paths problem on U 
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foreach 77 = 1 ,, min{/, i(v)} do 
foreach ■ h > l(v) — rj do 
R {zi : 0 < i < £(v) — 77 } 

Let Vq be the vertex of R minimizing Equation 0 
Store rg with key (v, 77 , rt) 


Algorithm 3: Algorithm for building an oracle with 0{f) query time. 

1 Preprocess T to answer LCA queries as shown in m 

2 For each vertex v € V{G), compute and store its level £{v). 


3 

4 

5 


foreach v G V{G) do 

Build graph U associated with vertex v as in Algorithm 

Build and store a distance sensitivity oracle of U with stretch 2fc — 1 


3.1 Oracle Setting 

In what follows, we show how Algorithm can be used to compute an approx¬ 
imate distance oracle of size 0{np) (see Algorithm]^. We also show that a 
smaller-size oracle can be obtained (see Algorithm]^ if we allow for a slightly 
larger query time. 

Theorem 3. Let F he a path failure of\F\ < f edges andt G V{G). Algorithm^ 
builds, in 0{n{in + /^)) time, an oracle of size 0{nf‘^) which is able to return: 

— a {2\F\ + 1)-approximate distance in G — F between r and t in constant time; 

— the associated path in a time proportional to the number of its edges. 

Proof. In order to answer a query we need to find: (i) the root rg of the subtree 
of C* which contains to, (ii) the root r/, of the subtree of C* containing t. In order 
to find rh, we perform a LCA query on T to find the least common ancestor u 
between v and t. Either £{v) > £{u) > £(v) — |F|, in which case u = rh, or 
£{u) < £{v) — |E| which means that t belongs to Eg. As in the latter case we 
can simply return dT{t), we focus on the former one. To find rg we look for the 
vertex associated with the triple {v, |F|,rh) stored by Algorithmat line 

We answer a distance query with the quantity dT(rg) + du> (rg, rj()-|-dr(r 7 i, t), 
which can be computed in constant time by accessing the distances stored in 
shortest path tree T, plus the solution of the APSP problem on U' computed by 
Algorithm when vertex v was considered. 
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To answer a path query we simply construct, and return, the path Q, by 
expanding the edges of the graph U' into paths which are in G — F, as explained 
before. This clearly takes a time proportional to the number of edges of Q. □ 

If we allow for a query time that is proportional to 0(/ + k), we can reduce 
the size of the oracle by computing a distance sensitivity oracle (DSO) of U (see 
Algorithm]^. In this case, we can still find vertex using the LCA query, as 
shown in the proof of Theorem while vertex rg is guessed among the (up to) 
/ roots of the trees in G — F* which are contained in Tg. The resulting oracle is 
summarized by the following: 

Theorem 4. Let F be a path failure of |F| < / edges, let t G V{G) and let 
k > 1 be an integer. Algorithm^ builds, in 0{n{m + f"^)) time, an oraele of size 
0{nkf^'^r'j which is able to return: 

— a {2k—l){2\F\ + l)-approximate distance in G—F between r and t in 0{f+k) 
time; 

— the corresponding path in 0(i + k + f) time, where £ is the number of its 
edges. 

4 Our 3-PASPT Structure for Paths of 2 Edges 

In what follows, we provide an algorithm which builds a 3-PASPT (see Algo¬ 
rithm 1^ for the special case of at most f = 2 cascading edge failures. This 
structure improves, w.r.t. the quality of the stretch, over the general (2|F| + 1)- 
PASPT of Section |3] 

The algorithm starts with a 3-EASPT with 0{n) edges [50] and proceeds as 
follows. As initial building block, it considers a suitable path P in the shortest- 
path tree Tc{r), and constructs a structure H that is able to handle the failure of 
a pair of edges { 61 , 62 }, such that ei G P, and guarantees 3-stretched distances 
from r, for each vertex in G. Then, we make use of the following result of [2]: 

Lemma 6 (|j2]). There exists an 0{n) time algorithm to compute an ancestor- 
leaf path Q in Ta{r) whose removal splits TQ{r) into a set of disjoint subtrees 
TQ{r,ri),..., TQ{r, rj) such that, for each i < j: 

— |rG(r,ri)| < n/2 and V{Q) nV{TGir,ri)) = 0 

— Tair, ri) is connected to Q through some edge for each i < j 

This allows us to incrementally add edges to FI by considering a set P of 
edge-disjoint paths. This set can be obtained by recursively using the path de¬ 
composition technique of Lemma on the shortest-path tree Tcir). We show 
that, in this way, we are able to build a 3-PASPT of size O(nlogn). Given a path 
TT = («,...,<) and a tree T', we denote by FirstLast(7r, T') the edges of the sub¬ 
paths of TT going (i) from s to the first vertex of tt in V(T'), and (ii) from the last 
vertex of tt in V{T') to t. If these vertices do not exists, i.e., V{tt) n V{T') = 0, 
then we define FirstLast(7r, T') = E{tt). Moreover, we denote by G{x) the edges 
connecting vertex x to its children in Tcfr). We are able to prove the following 
theorem, whose proof is given in the appendix: 
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Algorithm 4: Algorithm for building a 3-PASPT for the case of / = 2. 
Input : A graph G, r £ V{G), an SPT T = Tcir) 

Output: A 3-PASPT of G rooted at r 


1 H^Tcir) 

2 T ■£- compute a 3-EASPT of Tg^v) as shown in [20] 

3 H ^ E{H) U E{f) 

4 Compute a path decomposition V of Tq (r) by recursively applying Lemma 


5 foreach Path P gV do 

6 foreach x £ V{P) : x is not a leaf and x ^ r do 

7 Let 2 be the (unique) child of a: in P 

8 Let e be the edge connecting x and its parent int T 


9 

10 

11 

12 

13 

14 

15 

16 
17 


// Protect vertex x 

E{H) ■£- E{H) U FirstLast(7rG_^(a;), TG(r, z)) 
if 7rG-e(a:) contains an edge e' in C(x) then 
I E{H) <— E{H) UFirstLast{'KG-e-e' {x),TG{r, z)) 

II Protect vertex 2 
P(iL) ^P(P)U£;(7rG-e(t)) 
foreach e! £ {TVG-e(z) Pi C(x)} do 
I E{H) ^ EiH)uEi 7 VG-&_,,iz)) 

II Protect all the other children of x 
foreach children Zi of x Zi ^ z do 

Let {u,q) be the first edge of iiG-e-^x z ){x,Zi) with q £ V[Pair, Zi)) 
E{H)^E{H)yj{{u,q)} 


18 

19 

20 return 


// Protect vertices whose paths that do not contain x 
T' ■£- TG-x(r,) with edges oriented towards the leaves 
E{H)^E{H)u{{xx,X2) e E{T') : X2<^TG{r,z)} 

H 


Theorem 5. Let F be a path failure of |F| < 2 edges and t £ V{G). Algorithm 
^computes, in 0{nm + logn) time, a 3-PASPT of size 0{nlogn). 

Notice that it is possible to modify Algorithm|^in order to build an oracle of size 
O(nlogn) which is able to report, with optimal query time, both a 3-stretched 
shortest path in G—A" and its distance, when F contains two consecutive edges in 
T. Both the description of the modified algorithm and the proof of the following 
theorem is given in the appendix. 

Theorem 6. Let F be a path failure of\F\ < 2 edges andt £ V{G). A modifiea- 
tion of Algorithm^builds, in 0{nm + n^logn) time, an oracle of size O(nlogn) 
which is able to return: 

— a 3-approximate distance in G — F between r and t in constant time; 

— the associated path in a time proportional to the number its edges. 
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5 Experimental Study 


In this section, we present an experimental study to assess the performance, 
w.r.t. both the quality of the stretch and the size (in terms of edges), of the 
proposed structures within SageMath (v. 6.6) under GNU/Linux. 

As input to our algorithms, we used weighted undirected graphs belonging 
to the following graph categories: (i) Uncorrelated Random Graphs (ERD): gen¬ 
erated by the general Erdos-Renyi algorithm [3; (ii) Power-law Random Graphs 
(BAR): generated by the Barabdsi-Albert algorithm [T]; Quandrangular Grid 
Graphs (GRI): graphs whose topology is induced by a two-dimensional grid 
formed by squares. For each of the above synthetic graph categories we gener¬ 
ated three input graphs of different size and density. We assigned weights to the 
edges at random, with uniform probability, within [100,100 000]. We also con¬ 
sidered two real-world graphs. In details: (i) a graph (GAI) obtained by parsing 
the GAIDA IPv4 topology dataset m, which describes a subset of the Internet 
topology at router level (weights are given by round trip times); (ii) the road 
graph of Rome (ROM) taken from the 9th Dimacs Ghallenge Dataset]^ (weights 
are given by travel times). 

Then, for each input graph, we built both the (2k — 1)(2|F| -h 1)-PASPT, for 
which we focused on the basic case of A: = 1, and the 3-PASPT, as follows: we 
randomly chose a root vertex, computed the SPT and enriched it by using the 
corresponding procedures (i.e. Algorithmandresp.). We measured the total 
number of edges of the resulting structures. 

Regarding Algorithm we set / = 10, as such a value has already been 
considered in previous works focused on the effect of path-like disruptions on 
shortest paths MM- Then, we randomly select path failures of |F| edges to 
perform on the input graphs, with jEj uniformly chosen at random within the 
range [2, /]. We removed the edges belonging to the path failure from both the 
original graph and the computed structure. Regarding Algorithm we simply 
chose at random a pair of edges and removed them from both the original graph 
and the computed structure. 

After the removal, we computed distances, from the root vertex, in both 
the original graph and the fault tolerant structure, and measured the resulting 
average stretch. In order to be fair, we considered only those nodes that get 
disconnected as a consequence of the failures. Our results are summarized in 
Table where, for each input graph, we report the number of vertices and 
edges, the average size (number of edges) of the two fault tolerant structures 
and the corresponding provided average stretch. 

First of all, our results show that the quality of the stretch, provided by both 
the (2|F|-|-1)-PASPT and the 3-PASPT in practice, is always by far better than the 
estimation given by the worst-case bound (i.e. 2|F|-|-1 and 3, resp.). In details, 
the average stretch is always very close to 1 and does not depend neither on the 
input size nor on the number of failures. This is probably due to the fact that 
those cases considered in the worst-case analysis are quite rare. 

® http://www.dis.uniromal.it/challenge9 
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G 

|V(G)| 

|E(G)| 

(2|E| + 1)-PASPT 

3-PASPT 

#edges 

avg stretch 

#edges 

avg stretch 

ERD-1 

500 

50 000 

3980 

1.8015 

957 

1.0000 

ERD-2 

1000 

50 000 

8 899 

1.1360 

1924 

1.0000 

ERD-3 

5 000 

50 000 

20198 

1.0903 

9 501 

1.0035 

BAR-1 

500 

1491 

1366 

1.0003 

949 

1.0041 

BAR-2 

1000 

2 991 

2 765 

1.0034 

1871 

1.0005 

BAR-3 

5 000 

14 991 

13 349 

1.0040 

9459 

1.0000 

GRI-1 

500 

1012 

1008 

1.0005 

868 

1.0000 

GRI-2 

1000 

1984 

1973 

1.0000 

1749 

1.0000 

GRI-3 

5 000 

9 940 

9 884 

1.0000 

8 826 

1.0000 

GAI 

5 000 

6 328 

6033 

1.0000 

6026 

1.0000 

ROM 

3 353 

4831 

4 796 

1.0000 

4 780 

1.0000 


Table 1. Average number of edges and stretch factor for both the (2|F| + 1)- 
PASPT and the 3-PASPT. 


Similar considerations can be done w.r.t. the number of edges that are added 
to the SPT by Algorithms [^and]^ In fact, also in this case, the structures behave 
better than what the worst-case bound suggests. For instance, the number of 
edges of the (2|F| + 1)-PASPT (the 3-PASPT, resp.) is much smaller than nf^ 
(nlogn, resp.). In summary, our experiments suggest that the proposed fault 
tolerant structures might be suitable to be used in practice. 
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A Omitted Proofs 


In this section, we upper-bound the running time of Algorithm]^ In details, we 
prove that, given a set of two failures F = { 61 , 62 }, dn-Fit) < 3 • dc-pit) for 
every t S V{G), and that iJ contains 0{n ■ logn) edgesj^ W.l.o.g. we assume 
that that ei = (y, x), 62 = {x, k), where x is a child of y and fc is a child of x in 
T. 

Notice that, every possible edge 61 of a pair of failures that can occur on 
Tq^x) is considered exactly once as, during the construction phase, we make use 
of the path decomposition technique of [2]. Let P G V he the path of the path 
decomposition V which contains ei and let z be the vertex following x in 
Notice that the other failed edge 62 = (x, k) might or might not belong to the 
very same path P. 

We now bound the distance dn-pit) between r and a generic target vertex 
t gV (G). We assume, w.l.o.g., that t belongs to TG{r, x) as otherwise we trivially 
have dn-pit) = dc-F{t). For the sake of clarity, we divide the proof into parts, 
depending on the position of t in Tc{r) — F and on the structure of the path 
TTG-Pit)- 

Lemma 7. For every t G V{TG{r,z)), there exists a path p*{t) between r and t 
in FI — F such that w{TT*{t)) < 3 • dc-pit). 

Proof. The edges added to H at Lines [T2}[T4| of Algorithm guarantee that 
dn-piz) equals dc-piz) for every possible pair of failures. It follows that we 
can choose 7 r *( t ) = ttg-f{z) o T^aiz^t), as we have: 


w{TT*{t)) = dn-piz) -k dn-piz, t) 

< dn-piz) + dciz.t) 

< do-piz) + daiz^t) 

< dc-pif) + da-pit, z) + daiz, t) 

< da-pit) + ‘^dait, z) 

< da-pit) + ‘idaif) ^ Sda-pit). 


i'Kaiz,t) = TTH-Fiz,t)) 

(By Lines 1^ 14 of Alg. 

(By triang. ineq.) 
i'naiz,t) = TTa-Fiz,t)) 
iz G ViTra)it)) 


□ 


Lemma 8. There exists a path 7 r*(x) between r and x in FI — F such that 
w( 7 r*(x)) < 3 • da-pix) if €2 = ix,z) and wi'K*ix)) = da-pix) otherwise. 


Proof. If Vina-pix)) H ViTdrjz)) = 0 we set 7 r*(x) = ira-pix) and we are 
done as 7 r*(x) gets added to H by Lines |& - 11 of Algorithm]^ 

Otherwise, if Viira-ei-e^ix)) H ViTcir, z)) yf 0, let q, q' be the first and last 
vertex of tt = PQ-e^-e^ix) that is in ViTair,z)), respectively. If 62 yf ix,y) then 


° We only focus on exactly two edge faults since H already contains a 3-EASPT. 

^ Note that vertex 2 always exists as the last vertex of P must be a leaf in T, while x 
is an internal vertex. 


16 







it suffices to choose 'k*{x) = it. Indeed, by construction, tt is in since both 
7 r[r, g] and 7 r[g,x] = T:o{q,z) are in H. 

Finally, if 62 = {x, y), then pi*{x) = Tr*{q') o 7 r[g', a;], where Tr*{q') is the path 
of Lemma 1^ The path 7r*(x) is in H and we can bound its length as follows: 

w{Tr*{x)) = w{TT*{q)) + dc-riq, x) < Sdo-riq) + dc-riq, x) < 3dG-F{x). 


□ 


Lemma 9. For every t ^ V{TG{r, z)) U {x} such that x ^ V{TrG-F{'t))> there 
exists a path 7 r*(<) between r and t in FI — F satisfying w{Tr*(t)) < 3 • dc-Fit). 


Proof. First of all notice that it must hold FG-F{t) = TTG-x{t). If TTc-xif) does 
not contain any vertex of z) we are done, as we can set 7r*(t) = TTG-x{t) (by 
Lines 18 -19 of Algorithm]^. Otherwise, let us call q the last vertex of FG-x{t) 
that belongs to TG{r,z). We set F*{t) = 7 r*(g) o FG-xiq,t), where 7 r*(g) is the 
path of Lemma We have 


w{F*{t)) = w{TT*{q)) + dH-x{q,t) 

< Sdc-Fiq) + dn-Fiq, t) 

< 3dG-F{q) + dH-F{q, t) 

< 3dG-F{q) + 'idG-F{q, t) 


(By Lemma 

(By Lines [l|{^ of Alg. |4| 
3dG-F{t) (Since g e y( 7 rG-_F(t))) 


□ 


Lemma 10. For every t ^ V(TG(r, z)) U {x} such that x G V{nG-F{t)), there 
exists a path n*{t) between r and t in FI — F satisfying w{Tr*(t)) < 3 • dG-F{t). 


Proof. Notice that t belongs to a subtree TG{r,Zi) for exactly one child Zi ^ z 
of X in TG{r). If (x, yf 62 , we have that TrG{x,t) = FG-F{x,t) = Fu-Fix^t) 
We set F*{t) = 7 r*(x) o 7 rG(x, t) where 7 r*(x) is the path of Lemma|^ We have: 

w{F*{t)) = w{f*{x)) + dG{x,t) < Mg-f{x) + dG-F{x,t) < 3dG-F{t) 


Otherwise, 62 = (x, Zj), which means that t belongs to a subtree of TG{r) 
which gets disconnected form x by the removal of 62 - 

Since 62 yf {x,z), we know that the path 7 r*(x) of Lemma satisfies 
w( 7 r*(x)) = dG-F{x). Moreover, the shortest path fg-f{x, zf) traverses at most 
one other subtree (other than TG(r, z^)) rooted at a child of x. This is because 
H — F contains the shortest paths from x to every vertex in V{TG{r,x)) \ 
V{TG{r, Zi)). Let {u,q) be the first edge of the path FG-F{x,Zi) such that 
q G V{TG{r,Zi)) and notice that this edge belongs to H (Lines ^17 of Al¬ 
gorithm]^. By the choice of ( m , g) we have FH-F{x,q) = fg{x,u) o ( u , g). We 
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set 7r*(t) = 7r*(a;) ottc{x,u) o {u,q) 0Tra{q,Zi) oTrG{zi,t). 


w{Tr*{t)) = w(7r*(x)) + dcix, u) + w{u, q) + dciq, Zi) + daizi, t) 

< dG-F{x) + dG-F{x, q) + dG-F{q, Zi) + dG{zi, t) 

< dG-F{x) + dG-F{x,Zi) + dG{zi,t) (Since q € V{FG-F{x,Zi))) 


< dG-F{x) + dG-F{x, t) + 2dG{z„ t) 

< dG-F{x) + dG-Fix, t) + 2dG{x, t) 

< dG-F{x) + dG-Fix, t) + 2dG-Fix, t) 
= dG-Fix) + 3dG-Fix,t) < 3dG-Fit)- 


(By triang. ineq.) 
iz, G ViFG)ix,t)) 

(Since x G VinG-Fit))) 
□ 


We now bound the size of H. In order to do so, it is useful to split the vertices 
of the T into components, depending on the vertex x that is currently considered 
by Algorithm]^ More formally, when a couple of edges (y, x), (x, z) is considered 
we can partition the vertices of T — a; into three distinct sets (see Figure]^: 

— Ux, which contains the vertices which are in the same subtree as r in T — x; 

— Dx, which contains the vertices which are in the subtree of T rooted at z: 

— Ox, which contains all the vertices which are in the subtree rooted at some 
child Zi ^ z of X in T. 

We are now read to prove: 

Lemma 11. The structure H returned by Algorithm^ contains 0(n • logn) 
edges. 


Proof. To prove the claim we fix a generic path P = {u,... ,v) (of at least two 
edges) of the path decomposition, where f is a left and u one its ancestors in T. 
We show that, when Algorithm considers P, the total number of edges added 
to H is Oi\ViTGir,u))\). 

For the sake of the analysis, imagine the edges of paths considered by the 
algorithm as if they were directed. Notice that no new edge entering a vertex 
in Ux can be added to H, as the shortest paths towards vertices in Ux cannot 
change, and H contains a shortest path tree T of G. Hence, in the following, we 
ignore all the edges entering vertices in Ux. 

In Lines [9HTT] the edges of at most two paths are added to H. Moreover, by 
definition of FirstLast(-, •), at most one edge of each path enters a vertex in 
Dx. This implies that the number of new edges is at most OiOx). In Lines 12 ■ 14 
at most 3 paths are considered as {nG-eiiz) n C'(x)} contains at most 2 edges. 
Each of those paths has at most one new edge which enters a vertex q in 
since, once this happens, the shortest path from g to z of T is already in H. 
Again, the number of new edges is at most OiOx). In Lines 15 -17 at most one 
edge for each children of Zi yf z of x is added to H, and all those children belong 
to Ox. Finally, in Lines [T8|(19| only new edges entering vertices in Ox are added 
to H, so their overall number is OiOx). 
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Fig. 3. Left: a view of the partition of the vertices induced by the removal of 
a pair of edges of E{Ta{r)). Right: A path decompostion of a tree. Paths of 
the decomposition are highlighted. Edges connecting the roots of the resulting 
subtrees to a path of the decomposition are dashed. 


As all the sets Ox associated to the different vertices x of P are pairwise 
vertex disjoint, we immediately have that at most 0(|P(rG(?','*^))|) edges are 
added to H when path P is examined. 

The first path P considered by Algorithm is the one obtained by applying 
Lemma on T. The removal of this path splits T into a number h of subtrees 
Ti,... ,Th having rji,... ,r]h vertices respectively. Moreover we know that rji < 
yi = 1,... ,h and that Vi — reapply the procedure recursively, 

we get the following recurrence equation describing the overall number of new 
edges: 

h 

S{n) = ^ S{ri^) + n 

i=l 

which can be solved to show that S{n) = O(nlogn). To conclude the proof, 
we only need to notice that the set of paths V used by Algorithm is defined 
exactly in this very same recursive fashion, and that the tree T has 0{n) edges. 

□ 


Finally, we bound the running time of Algorithm]^ 

Lemma 12. Algorithm^requires 0{nm + n^logn) time. 

Proof. First of all, observe that a rough estimate of the time needed for com¬ 
puting the path decomposition V is O(n^) and that the time needed to build T 
is 0{nm) [SO] - Moreover each vertex x get considered at most once. 

When the algorithm is considering a vertex x, a constant number of different 
shortest paths are needed. Those can be computed in 0 (to-I- nlog n) time using 
the Dijkstra’s algorithm where, for each vertex v, we also store the last edge of 
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its shortest path that (i) leaves the same connected component of r in T—F, (ii) 
leaves Tq^t, z), and (iii) enters the same connected component as v in T—F. This 
allows to implement FirstLast(-) and to add the edges needed in Lines 15 mil 
[l8f[T9] in time proportional to the vertices in Ox- Hence, the overall time spent 
by adding edges to H is again O(nlogn). □ 

By Lemmata [THTTI Theorem [^follows. 


B Oracle Setting for / = 2 and Proof of Theorem 

We here give a brief description of how to modify Algorithm in order to build 
an oracle of size 0{n ■ logn) which is able to report, with optimal query time, 
both a 3-stretched shortest path in G — F and its distance, when F contains two 
consecutive edges in T. 

In order to do so, we first add an additional step to Algorithm which 
computes an 0(n) size structure which is able to answer LCA queries in 0(1) 
time m- Then we store the tree T and, for each vertex x, its child z on the 
path decomposition. 

Whenever we are considering a vertex x and its child z € P., we also store 
each path, say tt, towards a vertex, say u, considered in Lines |9 HTT| [T2|{T4l using 
a compact representation. To be more precise, let s be the last vertex of tt which 
belongs to the same component as r in T — F, and let g, q' be the first and last 
vertex of tt which belong to T{z). We only store the (i) vertices s,q,q', (ii) the 
subpaths 7r[s : q], 7r[g',M] along with their lengths, and (iii) a reference to the 
position X in the subpaths of tt, if any. If q,q' do not exists, we simply store s, 
7r[s : u], r(;(7r[s,M]), and a reference to x. 

In Lines 15 -[^ we add one edge {u, q) for each children Zi ^ z of x. We store 
{u,q) alongside Zi. 


Finally, in Lines 18 -19 we add some edges of the shortest path tree Tc-xir). 
For each vertex u G Ox, we store (i) the edge leading to its parent in TQ_x{r), 
(ii) the last vertex q of pic-xiu) which is either in U or in V(To(r, z)), (iii) the 
length of TTG-xiu)[q, u], and iv) the root of the subtree containing u in T — x. 

Since the amount of memory used to do so is always proportional to the 
vertices in Ox we have that the overall size is still 0(n log n). It is easy to see 
that, given a path failur^ F = {{y,x),{x,k)} and a vertex t, we can answer 
a query by building (or computing the distance of) 7r*(t) as described in the 
appropriate lemma in Lemmata |7f|10| In order to do so we need to know: 


— The root of the subtrees of T — a: containing t. 

— Whether TTG-p{t) contains x. 

The former can be easily done by querying, in constant time, the least common 
ancestors of the pairs t, z and t,x in T to determine if z belongs to U or Ta^r, z). 


® Once again, we focus on the failure of exactly two edges. To handle the failure of 
only one edge e, it suffices to store a single backup edge associated with e, as shown 

in EOl. 
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If that is not the case, then the root of the sought subtree was explicitly stored 
and can be retrieved. As for the latter, we consider both cases. That is, we 
compute two candidate paths, we discard the one containing (x,Zi), if any (this 
is done using the pointers to x), and we return the shortest of the remaining 
paths (or its distance). The above reasoning suffices to prove Theorem 
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